Provide a package-lock.json

[tpetazzoni]

Would it be possible to provide a package-lock.json in the Git repository, so that it is possible to reproducibly retrieve the dependencies of forge? Committing the package-lock.json into the Git repository is recommended by the official NPM documentation, https://docs.npmjs.com/cli/v8/configuring-npm/package-lock-json, which states "This file is intended to be committed into source repositories".